Authentication Bypass via HTML Form & Identifier First Adapter

CVE-2023-37283

What is CVE-2023-37283?

An authentication bypass vulnerability exists in the PingFederate Identifier First Adapter, potentially allowing unauthorized access. This vulnerability arises from a specific configuration that is strongly discouraged. Organizations using PingFederate should ensure that their configurations are not vulnerable to exploitation under these circumstances, as improper settings could lead to significant security risks.

References